CVE-2009-4144
Fixed in a distro release EPSS 2%
NetworkManager (NM) 0.7.2 does not ensure that the configured Certification Authority (CA) certificate file for a (1) WPA Enterprise or (2) 802.1x network remains present upon a connection attempt, which might allow remote attackers to obtain sensitive information or cause a denial of service (connectivity disruption) by spoofing the identity of a wireless network.
Products: gnome networkmanager
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | network-manager-applet | 0.7.2-2 |
| Debian 13 | network-manager-applet | 0.7.2-2 |
| Debian 14 | network-manager-applet | 0.7.2-2 |
| Red Hat Enterprise Linux 5 | NetworkManager | 1:0.7.0-9.el5_4 |
| Red Hat Enterprise Linux 5 | NetworkManager-debuginfo | 1:0.7.0-9.el5_4 |
| Red Hat Enterprise Linux 5 | NetworkManager-devel | 1:0.7.0-9.el5_4 |
| Red Hat Enterprise Linux 5 | NetworkManager-glib | 1:0.7.0-9.el5_4 |
| Red Hat Enterprise Linux 5 | NetworkManager-glib-devel | 1:0.7.0-9.el5_4 |
| Red Hat Enterprise Linux 5 | NetworkManager-gnome | 1:0.7.0-9.el5_4 |